Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
Filtered Reports
4 / 4 results
highbug_reportVulnerabilityCISA: Plex2Shell exploit chain actively used to breach Plex servers
Plex Media Server versions before 1.43.3.10861. Four vulnerabilities (CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, CVE-2026-96656) chained together to achieve unauthenticated remote code execution with elevated privileges.
highbug_reportVulnerabilityPlex2Shell chain exploited in wild to deploy crypto miners and backdoors
Plex Media Server versions prior to 1.43.3.10861. The Plex2Shell chain combines four CVEs (CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, CVE-2026-96656) to achieve unauthenticated remote code execution.
highbug_reportVulnerability36,000 Plex Media Servers remain unpatched against undisclosed flaws
Plex Media Server v1.43.2 and earlier, Plex Desktop prior to v1.115.0. Over 36,000 internet-exposed instances confirmed vulnerable as of September 2026. Affects self-hosted and NAS-based deployments.
highbug_reportVulnerabilityPlex urges immediate patching of undisclosed flaws in Media Server
Plex Media Server v1.43.2 and earlier, Plex Desktop client versions prior to 1.115.0. Affects all platforms including Windows, macOS, Linux, and NAS devices running Plex.